Draft notice
ZeroGap helps you build, check and improve your resume. We use your account details to run your account, your resume to provide the features you ask for, and, only if you allow it, Google's Gemini AI to read and improve your resume. You can see, correct, download and delete your data, and withdraw consent, from the Privacy centre at any time.
Who we are
ZeroGap is operated by Workfonic (the Data Fiduciary for the personal data described here). Contact details for privacy questions and grievances are shown at the end of this notice.
What we collect
Account details: your name, email address and profile image (through our sign-in provider, Clerk), your role and sign-in times.
Profile details you choose to add: phone, location, headline, current role, industry and experience level.
Resumes: files you upload (PDF or DOCX), the text we extract from them, and the structured resume you edit, including the contact details, work history, education and skills it contains.
Results: ATS and job-match results, job descriptions you paste, AI suggestions, cover letters and your resume change history.
Plan and usage: your plan, usage counts and AI usage (token counts and cost, no content).
Security records: sign-in and MFA events, IP address and browser type, kept to protect your account.
We do not ask for your date of birth, government identifiers or payment details.
Why we use it
To run your account and keep it secure (needed for the service).
To store, edit, score and export your resumes and cover letters (needed for those features).
AI processing (optional, your consent): to parse uploaded resumes, judge job-match requirements, suggest rewrites and draft cover letters, the relevant text is sent to Google's Gemini API. Email addresses and phone numbers are removed before a resume is sent for parsing. Without this consent you can still use the guided builder, editor, rule-based ATS checks and exports.
To apply your plan's limits.
To handle your privacy requests and keep a record of your choices.
We do not sell your data, use it for advertising, or use your resume to train AI models.
Who processes it for us
Clerk (sign-in), MongoDB Atlas (database), Cloudflare R2 (private file storage), Google Gemini API (AI processing, only with your consent) and our hosting provider. They process data on our instructions. Some of these providers may process data outside India. We list them, and what each receives, in our processor register.
How long we keep it
Your account data and resumes are kept while your account is active and until you delete them. When you delete a resume, its file and content are deleted. When you delete your account, your files, resumes, results, AI suggestions and cover letters are deleted; we keep only records we need for security, to show how we handled your choices and requests, and billing records, linked to an anonymised account. Security records are kept for a limited period (currently up to two years) and then deleted automatically.
Your rights
From the Privacy centre you can: get a copy and summary of your data and who it was shared with; correct or update it (most details you can edit directly); delete a resume or your whole account; withdraw consent to AI processing at any time, as easily as you gave it; raise a grievance; and nominate someone to exercise your rights if you die or become unable to. We will tell you the outcome, and explain if a request cannot be fully met. If you are not satisfied with our response to a grievance, you may approach the Data Protection Board of India.
Withdrawing consent
Withdrawing AI consent stops new AI processing straight away, cancels queued AI work and deletes AI suggestions you have not yet accepted. It does not undo processing that already happened, and text you already accepted into your resume stays yours to keep or delete. Withdrawing does not affect features that do not use AI.
Age
ZeroGap is for job seekers aged 18 or over. We do not knowingly process the personal data of children. If you are under 18, please do not use ZeroGap.
Privacy contact and grievances
A privacy contact has not been published yet. Signed-in users can raise questions and grievances from the Privacy centre.
Signed-in users can also submit and track requests and grievances in the Privacy centre.
Notice version 2026-11-11